Logto

Authentication and authorization infrastructure for consumer and business apps.

identityauth
Websitelogto.io
CategoryAuth & users
PricingFreemium
Card requiredNo
Open sourceYes

ABOUT

What is Logto?

Logto is an open-source auth platform that combines identity infrastructure with a polished management console. It supports OIDC, SAML, social logins, MFA, passkeys and role-based access control. The open-source core can be self-hosted via Docker, while the cloud plan handles hosting and scaling for you.

BEFORE YOU SIGN UP

What you should know

✓
Open-source core with self-hostingThe MIT-licensed core runs in Docker. Deploy on your own infrastructure with full data control.
✓
Modern admin consoleThe web UI for managing users, roles, permissions and SSO connections is polished and intuitive.
△
Growing international projectOriginally a Chinese team, Logto now serves a global user base with docs in English and Chinese.
✕
Documentation gapsSome advanced topics like custom claims, SAML edge cases and migration guides are incomplete or outdated.

COMMUNITY

From the forums

Logto gets consistent praise on r/selfhosted as a capable open-source alternative to Auth0. The admin console is modern and responsive. Common criticisms include occasionally outdated documentation and some rough edges in edge cases like SAML federation and custom claims.

— Community sentiment

ABOUT US

Honest, independent, no fluff.

No paid placements. Just a clear look at what this does, what it costs, and what to know before you commit.

Read more→

FAQ

Questions, answered.

Can Logto replace Auth0 for my SaaS?+

Yes, Logto covers OIDC, SAML, social login, MFA and RBAC. You can self-host it for full data control or use the managed cloud.

Does Logto support passkeys?+

Yes, passwordless sign-in with WebAuthn passkeys is supported for both first-factor and second-factor authentication.

How do I migrate from Auth0 to Logto?+

Logto provides a user import API and guides for migrating from Auth0, though you'll need to handle token format and redirect URI differences manually.